15 matches found
CVE-2023-45878_to_RCE
CVE-2023-45878 a RCE Este script encadena y automatiza la Escritura Arbitraria de Archivos a RCE en Gibbon LMS mediante la explotaciĆ³n de CVE-2023-45878. El script realiza los siguientes pasos: 1. Genera una shell inversa stageless de msfvenom para Windows 2. Sube una webshell explotando...
Gibbon LMS <= v25.0.01 - File Upload to RCE
Gibbon LMS versions 25.0.1 and earlier are vulnerable to an Arbitrary File Upload that can lead to Remote Code Execution RCE. The issue stems from the rubricsvisualisesaveAjax.php endpoint, which, notably, does not require authentication. Because of this, unauthenticated attackers could potential...
CVE-2023-45878
CVE-2023-45878 EscribĆ este script basĆ”ndome en el trabajo de https://herolab.usd.de/security-advisories/usd-2023-0025/ . El exploit funciona mediante una vulnerabilidad de Arbitrary File Write en Gibbon LMS 25.0.1 . Este PoC subirĆ” un simple script php cmd, y luego lo usarĆ” para cargar una rever...
CVE-2023-45878-POC
CVE-2023-45878-POC CVE-2023-45878 poc para Gibbon LMS en XAMPP Windows. Sube una webshell llamada shell.php para inyecciĆ³n de comandos. Para reverse shell, sube un script ps1 de PowerShell reverse shell llamado shell.ps1 que se carga en la mĆ”quina objetivo usando shell.php. Requisitos Python3...
gibbonlms-filewrite_rce
Gibbon LMS Escritura Arbitraria de Archivos / RCE InformaciĆ³n de la Vulnerabilidad Escritura Arbitraria de Archivos en Gibbon LMS para RCE CVE-2023-45878 GibbonEdu Gibbon LMS versiĆ³n 25.0.1 y anteriores permite la Escritura Arbitraria de Archivos porque rubricsvisualisesaveAjax.php no requiere...
Exploit for Out-of-bounds Write in Gibbonedu Gibbon
Gibbon LMS Arbitrary File Write / RCE Vulnerability Informa...
Exploit for Out-of-bounds Write in Gibbonedu Gibbon
CVE-2023-45878 to RCE !cve-2023-45878torcehttps://github...
Exploit for Out-of-bounds Write in Gibbonedu Gibbon
CVE-2023-45878-POC CVE-2023-45878 poc for gibbon LMS on xampp...
Exploit for Out-of-bounds Write in Gibbonedu Gibbon
CVE-2023-45878 Wrote this script based on the work of https:/...
Gibbon LMS v26.0.00 - SSTI vulnerability
Exploit Title: Gibbon LMS v26.0.00 - SSTI vulnerability Date: 21.01.2024 Exploit Author: SecondX.io Research TeamIslam Rzayev,Fikrat Guliev, Ali Maharramli Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00 Tested on: Ubuntu 22.0 CVE :...
Gibbon 26.0.00 Server-Side Template Injection / Remote Code Execution
Exploit Title: Gibbon LMS has an SSTI vulnerability on the v26.0.00 version Date: 21.01.2024 Exploit Author: SecondX.io Research TeamIslam Rzayev,Fikrat Guliev, Ali Maharramli Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00 Tested on:...
Gibbon 26.0.00 Server-Side Template Injection / Remote Code Execution Exploit
Exploit Title: Gibbon LMS has an SSTI vulnerability on the v26.0.00 version Exploit Author: SecondX.io Research TeamIslam Rzayev,Fikrat Guliev, Ali Maharramli Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00 Tested on: Ubuntu 22.0 CVE :...
Gibbon LMS 26.0.00 PHP Deserialization / Code Execution
Exploit Title: Gibbon LMS has a PHP Deserialization vulnerability on the v26.0.00 version Date: 22.01.2024 Exploit Author: SecondX.io Research TeamAli Maharramli,Fikrat Guliev,Islam Rzayev Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00...
Gibbon LMS < v26.0.00 - Authenticated Remote Code Execution Exploit
Exploit Title: Gibbon LMS has a PHP Deserialization vulnerability on the v26.0.00 version Exploit Author: SecondX.io Research TeamAli Maharramli,Fikrat Guliev,Islam Rzayev Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00 Tested on: Ubuntu...
Gibbon LMS < v26.0.00 - Authenticated RCE
Exploit Title: Gibbon LMS has a PHP Deserialization vulnerability on the v26.0.00 version Date: 22.01.2024 Exploit Author: SecondX.io Research TeamAli Maharramli,Fikrat Guliev,Islam Rzayev Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00...